Hacker News: amaldavid

Show HN: A bilingual guide to Thaayam, a Tamil board game

amaldavid — Sun, 26 Apr 2026 13:41:22 +0000

I saw The Mahjong Guide (https://themahjong.guide/) today and loved how much a good visual explanation can do for an old game.

Around the same time, this HN thread about using coding assistants to revive projects you never were going to finish (https://news.ycombinator.com/item?id=47902525) pushed me to actually do something with the idea.

That combination sent me down a nostalgia rabbit hole. Thaayam / Dayaakattai is one of those games I played during childhood summers in Tamil Nadu with cousins, and this being summer again just brought those memories back.

So I made a small bilingual guide for it, in English and Tamil.

One thing this also made me realize is how strange and nice it is now to be able to build small things semi-passively with tools like Codex. You can have a little idea, keep nudging it between work or life, and a few hours later there is an actual site instead of another note sitting in a backlog.

The site includes the board, stick throws, safe squares, capture/finish rules, odds, strategy notes, history, and a little Dayakattai roll simulator.

Comments URL: https://news.ycombinator.com/item?id=47910263

Points: 11

# Comments: 1

New comment by amaldavid in "Show HN: KeyLeak Detector – Scan websites for exposed API keys and secrets"

amaldavid — Sun, 02 Nov 2025 05:25:50 +0000

Gitleaks is too good to be compared to this, the only areas where keyleak is comparable is it does runtime detection where sometimes your build process injects secrets via env vars into the bundle or any of your responses expose a config file or secrets.

New comment by amaldavid in "Show HN: KeyLeak Detector – Scan websites for exposed API keys and secrets"

amaldavid — Sun, 02 Nov 2025 04:02:40 +0000

Yep, Github does a wonderful job flagging secrets most times but irrespective of that this is happening in some sites. This was built out of personal curiosity and I had put it out for public because I myself was not aware if this will be actually useful and if so in what form. People do YOLO to prod, we have more kids building AI wrappers than I can count, and somewhere in that chaos secrets slip through the cracks.

Ideally I would have loved this to be a chrome plugin or part of the CI/CD pipeline or put it out as an adversary agent for all of these new vibe coded apps but don't think I'm that vested into the idea yet. Thanks for being gentle :)

New comment by amaldavid in "Show HN: KeyLeak Detector – Scan websites for exposed API keys and secrets"

amaldavid — Sun, 02 Nov 2025 03:55:47 +0000

Well, when i meant "personally" not in the app I manage. I have a quirk of checking sites to understand what they are using and how they are using and have stumbled upon sites with exposed Gemini, Google Maps, OpenAI keys etc.

https://news.ycombinator.com/item?id=45741569 - It was also partly inspired by this as I have seen legacy sites making these mistakes quite often.

With all the vibe coded apps that are getting launched or were launched early, there are enough holes to plug. This is just an attempt to help individuals or orgs to ensure they are not exposed. Just pushed it out what I had in mind based on my experience.

And I agree with you that an adversary approach won't work if we can't fix the underlying problem but the world has changed with enough vibe coded apps that are getting shipped everyday and very little of them care or know about security.

Show HN: KeyLeak Detector – Scan websites for exposed API keys and secrets

amaldavid — Sat, 01 Nov 2025 22:52:22 +0000

I built this after seeing multiple teams accidentally ship API keys in their frontend code.

The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a